Login Request a demo
AE
Product
Aerocms
by Aerocms Project · last CVE Jan 13, 2026
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 1High 8Medium 11Low 0
Severity
All severities20Critical1High8Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Aerocms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-38305
8.8
1%
Sep 13
AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the component /admin/profile.php
Affected: 0.0.1
CVE-2022-46137
7.5
1%
Dec 16
AeroCMS v0.0.1 is vulnerable to Directory Traversal
Affected: 0.0.1
CVE-2022-45329
7.5
1%
Nov 29
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Search parameter
Affected: 0.0.1
CVE-2022-45331
7.5
1%
Nov 22
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the p_id parameter at \post.php
Affected: 0.0.1
CVE-2022-45330
7.5
1%
Nov 22
AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the Category parameter at \category.php
Affected: 0.0.1
CVE-2022-46135
7.2
1%
Dec 16
In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server
Affected: 0.0.1
CVE-2022-46051
7.2
1%
Dec 13
The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks
Affected: 0.0.1
CVE-2022-27061
7.2
3%
Apr 8
AeroCMS v0.0.1 was discovered to contain an arbitrary file upload vulnerability via the Post Image function under the Admin panel
Affected: 0.0.1
Showing 8